Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning
CVE-2026-68945
Angular's `HttpTransferCache` caches HTTP requests made during Server-Side Rendering (SSR) so that they can be reused du
#severity:high
共收录 5387 条相关情报。
← 返回所有主题In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before...
CVE-2026-58061
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue al
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500...
CVE-2026-58059
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue a
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge...
CVE-2026-58060
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This is
In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity...
CVE-2026-59651
In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key. This issue als
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation...
CVE-2026-59644
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender.
In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session...
CVE-2026-59640
In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for...
CVE-2026-59641
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This iss
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored....
CVE-2026-59643
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affect
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by...
CVE-2026-59649
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issu
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self...
CVE-2026-59645
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. T
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when...
CVE-2026-59642
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked...
CVE-2026-59646
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length. This is
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero...
CVE-2026-59639
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue al
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before...
CVE-2026-12185
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This i
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to...
CVE-2026-3245
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution.
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N...
CVE-2026-18577
An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions throu
A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform...
CVE-2026-9856
A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes vi
Better Auth relies on better-call, which uses the rou3 router library. In affected versions of...
CVE-2025-71399
Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalize
FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard...
CVE-2026-68579
FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStream_